Role Overview

We are hiring a Senior IT Systems Engineer to run and scale the systems that keep our team productive and secure across our Toronto and Redwood City offices and our remote staff. You will be the right hand to the Head of IT and the day-to-day operational partner to our security engineering team: security writes the policy; you review and challenge it, then own its execution. IT is the single point of access to every system, so you will hold privileged access and be trusted to use it with care.

Job Title

Senior IT Systems Eng

Role Overview

We are hiring a Senior IT Systems Engineer to run and scale the systems that keep our team productive and secure across our Toronto and Redwood City offices and our remote staff. You will be the right hand to the Head of IT and the day-to-day operational partner to our security engineering team: security writes the policy; you review and challenge it, then own its execution. IT is the single point of access to every system, so you will hold privileged access and be trusted to use it with care.

Key Responsibilities

- Enterprise SaaS Upgrades: Lead the move of our applications to enterprise-grade tiers as we buy or upgrade them: SSO/SCIM, admin roles, audit logs, data controls, and clean cutover plans.
- Jira & Atlassian Administration: Own Jira Service Management and the wider Atlassian suite as admin: workflows, request forms, automation rules, JQL, and scripting against the Jira REST API.
- IT Automation: Automate anything repetitive, by any means that fits: scripts, Okta Workflows, Jira automation, Slack, and API integrations. Example: access requests that flow from a Jira ticket through manager and IT approval to the right Okta group, with no manual steps.
- Identity & Access:



Administer Okta as our central identity provider. Build and maintain SSO (SAML/OIDC) and SCIM integrations, using group-based access only, never per-user grants, and clean joiner/mover/leaver lifecycles tied to our HR system.
- AWS Access & Administration: Administer AWS IAM Identity Center, Organizations, accounts, and permission sets, with Okta-driven group access for engineering, DevOps, and MLOps teams.
- Endpoint & MDM: Manage macOS, Linux, and Windows fleets across more than one MDM, including remote scripting and script deployment, zero-touch enrollment, patching, disk encryption, and clean offboarding.
- Security Policy Execution: Review and challenge policies from our security team for practicality, then implement and operate them: MFA baselines, conditional access, and endpoint controls.
- SOC 2 Maintenance: Keep our SOC 2 certification healthy through ongoing audits: access reviews, evidence, and control upkeep.
- Onboarding & Offboarding: Run day-one IT onboarding for new hires (devices, MFA, accounts) and offboarding, in both offices and remotely.
- Network & Zero Trust: Own ZTNA/VPN and first-line network troubleshooting, and work with our in-house network engineer, landlords, and ISPs on office networking.
- IT Support & Escalation: Work the IT ticket queue, resolve complex technical, network, and hardware issues,



and guide junior staff and vendors.
- Hardware & Asset Management: Own the full lifecycle of computers and peripherals: purchasing, inventory, assignment, tracking, repair, and retirement, with an accurate, audit-ready asset inventory.
- Workspace & Vendors: Keep conference rooms and A/V reliable, manage hardware vendors, and maintain our software inventory.

Required Qualifications

- Bachelor's degree in Computer Science, Information Technology, Electrical Engineering, or a related field, or equivalent practical experience.
- 8+ years of hands-on experience in corporate IT (systems engineering, systems administration, or IT infrastructure). Security-only or cloud-only backgrounds are not enough; we need hands-on identity and endpoint work.
- Okta (or similar IdP) experience, and a clear grasp of authentication versus provisioning: SAML/OIDC SSO, SCIM, and just-in-time provisioning, and when to use each.
- Good hands-on AWS experience, especially IAM, IAM Identity Center, and permission sets.
- Hands-on MDM experience on macOS and Windows (JumpCloud, Rippling MDM, or Intune), including remote scripting through MDM (shell and PowerShell). Linux fleet exposure is a plus.
- Solid Jira and Atlassian administration, including the ability to code against Jira: automation rules, JQL, workflows, and the REST API (ScriptRunner or Forge a plus).
- A track record of moving SaaS applications to enterprise tiers and building IT automations end to end.
- Google Workspace administration.
- Networking fundamentals for troubleshooting: DNS, DHCP, Wi-Fi, and VPN/ZTNA.
- Scripting and automation skills (Python, Bash, or PowerShell) and comfort

📌 Senior IT Systems Eng (Toronto)
🏢 Cognichip
📍 Toronto